$ rpki-client -vvf rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft File: ddMZaVabXA3w2lOz2TE2YzRyEII.mft (raw, json) Hash identifier: s5qNpkY7aytZ6aRtWS0at41n1RGHVC3HDNlgVW4aeRQ= Subject key identifier: 5F:7B:E3:62:CD:70:A6:A8:2B:BD:73:F1:5B:E9:93:BE:84:48:21:3D Authority key identifier: 75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82 Certificate issuer: /CN=A915E5DF/serialNumber=75D31969569B5C0DF0DA53B3D931366334721082 Certificate serial: 010A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft Manifest number: 0105 Signing time: Tue 05 Aug 2025 05:32:53 +0000 Manifest this update: Tue 05 Aug 2025 05:32:53 +0000 Manifest next update: Tue 12 Aug 2025 05:32:53 +0000 Files and hashes: 1: ddMZaVabXA3w2lOz2TE2YzRyEII.crl (hash: 8a2oA2dsnf+3VeTYDtzXVfDeqMCqc5idB5qAJ1imE6s=) 2: 4483A1DE5EBD11EFAEB0D27FC4F9AE02.roa (hash: Ga1jsRYecaBQWadBOEJf3Y9akBHnUgs+85T4mwwYjp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 05:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 266 (0x10a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E5DF, serialNumber=75D31969569B5C0DF0DA53B3D931366334721082 Validity Not Before: Aug 5 05:32:53 2025 GMT Not After : Aug 12 05:32:53 2025 GMT Subject: CN=68919785-eddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:18:ab:87:c4:2e:36:ec:1e:bf:aa:33:8f:22: f7:a6:a7:79:cc:3f:3b:87:2d:44:d1:11:44:50:e6: 3d:d5:36:97:ee:d7:db:ee:a0:0e:b8:f7:e8:75:ec: 47:ea:76:fa:93:de:b1:7a:32:8b:48:28:17:1d:b8: 74:d3:78:d9:6b:91:56:76:22:05:b2:71:2b:b1:19: 13:5c:a4:18:24:e9:c1:7b:f3:bf:e1:64:0d:73:94: 0d:50:bc:fb:16:a2:4c:78:f3:88:b5:55:38:a1:3c: 96:bb:08:44:cd:b3:3c:69:ce:b7:3f:17:ff:2b:19: c5:13:b2:e1:6c:e6:eb:b7:e7:3f:d4:ab:2e:68:58: 0c:c1:ad:7e:e2:72:e9:8b:11:a7:db:49:8a:fc:67: 56:a9:c9:5e:72:41:0f:be:fb:5f:80:00:f3:18:64: 1c:55:20:c9:96:78:ee:f9:4d:de:c0:d6:a3:97:72: d3:e0:05:ac:46:cb:c4:3b:6c:37:4d:f8:36:0e:a6: b0:19:df:b6:e4:52:ff:f2:a4:0d:3d:91:b6:53:2b: 35:3a:2d:1c:59:be:91:37:02:19:5f:bb:6d:07:3b: 11:38:b4:e9:06:4d:40:8f:4e:3b:b3:b0:0e:8b:29: d2:18:f7:5c:7a:d2:ea:c0:c2:a6:cb:a8:db:32:48: d6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:7B:E3:62:CD:70:A6:A8:2B:BD:73:F1:5B:E9:93:BE:84:48:21:3D X509v3 Authority Key Identifier: keyid:75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:72:5d:9f:42:a8:1b:37:ec:85:49:14:47:e6:1c:ea:5b:eb: 82:74:7d:17:de:00:75:f0:a5:92:2d:1c:b5:10:6f:1a:69:75: 4b:bb:df:68:93:d0:d3:4d:98:c9:ff:4a:77:33:50:5e:5e:25: 80:3c:31:44:7f:55:df:ef:8e:0c:be:95:5a:42:b1:5d:fb:91: 02:04:ff:d1:31:5c:a1:2b:81:a9:99:6a:43:42:7c:df:47:31: 14:e8:f3:37:c0:63:bb:a5:dd:33:27:1d:4b:70:13:6c:17:eb: b6:cd:0c:21:52:ff:f9:fc:39:67:de:2c:09:c8:3a:33:62:3a: a6:63:7c:95:d0:d5:03:4b:7b:34:5c:76:7f:06:0b:93:47:fb: dd:54:01:55:3d:be:60:23:85:24:55:d8:62:8d:20:46:cf:dd: 0e:00:1e:d8:4e:b6:52:51:e6:5a:d0:f9:fd:28:b3:d4:e3:94: 19:1a:b2:e0:f4:0b:f3:d1:d5:8f:fd:07:c0:7b:2c:30:da:5b: f4:ec:a4:c8:14:ad:d8:bc:f5:04:af:86:da:16:76:9d:7e:c0: 40:13:73:ee:7f:48:38:4a:45:26:39:78:01:2c:fd:cd:33:ac: 40:02:a2:46:d8:46:ef:90:14:56:14:54:cc:b4:f4:6a:77:c1: 0d:f8:0b:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU1REYxMTAvBgNVBAUTKDc1RDMxOTY5NTY5QjVDMERGMERBNTNCM0Q5MzEzNjYz MzQ3MjEwODIwHhcNMjUwODA1MDUzMjUzWhcNMjUwODEyMDUzMjUzWjAYMRYwFAYD VQQDEw02ODkxOTc4NS1lZGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBirh8QuNuwev6ozjyL3pqd5zD87hy1E0RFEUOY91TaX7tfb7qAOuPfodexH 6nb6k96xejKLSCgXHbh003jZa5FWdiIFsnErsRkTXKQYJOnBe/O/4WQNc5QNULz7 FqJMePOItVU4oTyWuwhEzbM8ac63Pxf/KxnFE7LhbObrt+c/1KsuaFgMwa1+4nLp ixGn20mK/GdWqcleckEPvvtfgADzGGQcVSDJlnju+U3ewNajl3LT4AWsRsvEO2w3 Tfg2DqawGd+25FL/8qQNPZG2Uys1Oi0cWb6RNwIZX7ttBzsROLTpBk1Aj047s7AO iynSGPdcetLqwMKmy6jbMkjWmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF9742LN cKaoK71z8Vvpk76ESCE9MB8GA1UdIwQYMBaAFHXTGWlWm1wN8NpTs9kxNmM0chCC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTVERi9DQkVGQ0Q5Q0U2 NzExMUVFQjdCQ0JFMjlDNEY5QUUwMi9kZE1aYVZhYlhBM3cybE96MlRFMll6UnlF SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RkTVphVmFiWEEzdzJsT3oyVEUyWXpSeUVJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTVERi9DQkVGQ0Q5Q0U2NzExMUVFQjdCQ0JFMjlDNEY5QUUwMi9kZE1aYVZhYlhB M3cybE96MlRFMll6UnlFSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAacl2fQqgbN+yFSRRH5hzqW+uCdH0X3gB18KWSLRy1EG8aaXVLu99o k9DTTZjJ/0p3M1BeXiWAPDFEf1Xf744MvpVaQrFd+5ECBP/RMVyhK4GpmWpDQnzf RzEU6PM3wGO7pd0zJx1LcBNsF+u2zQwhUv/5/Dln3iwJyDozYjqmY3yV0NUDS3s0 XHZ/BguTR/vdVAFVPb5gI4UkVdhijSBGz90OAB7YTrZSUeZa0Pn9KLPU45QZGrLg 9Avz0dWP/QfAeyww2lv07KTIFK3YvPUEr4baFnadfsBAE3Puf0g4SkUmOXgBLP3N M6xAAqJG2EbvkBRWFFTMtPRqd8EN+AvG -----END CERTIFICATE-----Generated at Wed Aug 6 04:00:27 2025 by rpki-client